N8
Product
n8n
On CISA KEVExploited in the wild
197
CVEs
1
On KEV
10.0
Max CVSS
45
New 30D
Severity mix
Critical 28High 97Medium 72Low 0
Watch
Add n8n to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-25054 | 5.4 | Feb 4 | n8n is Vulnerable to Stored Cross-Site Scripting via Markdown Rendering in Workflow UI Affected: < 1.123.9; < 2.2.1 |
| CVE-2026-25051 | 5.4 | Feb 4 | n8n Improper CSP Enforcement in Webhook Responses May Allow Stored XSS Affected: < 1.123.2 |
| CVE-2025-68697 | 5.4 | Dec 26 | Self-hosted n8n has Legacy Code node that enables arbitrary file read/write Affected: < 2.0.0 |
| CVE-2025-61914 | 5.4 | Dec 26 | n8n's Possible Stored XSS in "Respond to Webhook" Node May Execute Outside iframe Sandbox Affected: < 1.114.0 |
| CVE-2026-103245 | 5.3 | Oct 1 | n8n before 1.123.80, 2.39.6, and 2.40.1 Missing Webhook Signature Verification Affected: before 1.123.80; 2.0.0 before 2.39.6; 2.40.0 before 2.40.1 |
| CVE-2026-86080 | 5.3 | Sep 8 | n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open Affected: >= 2.38.0, < 2.38.2; >= 2.0.0, < 2.37.7; < 1.123.76 |
| CVE-2026-65014 | 5.3 | Jul 22 | n8n before 2.28.0 Authentication Bypass via test-webhook Affected: before 2.28.0; before 2.27.4 |
| CVE-2026-33722 | 5.3 | Mar 25 | n8n Has External Secrets Authorization Bypass in Credential Saving Affected: < 1.123.23; >= 2.0.0-rc.0, < 2.6.4 |
| CVE-2025-68949 | 5.3 | Jan 13 | n8n has a Webhook Node IP Whitelist Bypass via Partial String Matching Affected: >= 1.36.0, < 2.2.0 |
| CVE-2026-92587 | 5.0 | Sep 16 | n8n before 1.123.76 Sandbox Escape via Git Relative URL Affected: before 1.123.76; before 2.38.2; before 2.37.7 |
| CVE-2026-86085 | 4.9 | Sep 8 | n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment Endpoints Affected: < 2.37.7; >= 2.38.0, < 2.38.2 |
| CVE-2026-86993 | 4.9 | Sep 8 | n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check Affected: >= 2.38.0, < 2.38.2; >= 2.0.0, < 2.37.7; < 1.123.76 |
| CVE-2026-33751 | 4.8 | Mar 25 | n8n Vulnerable to LDAP Filter Injection in LDAP Node Affected: < 1.123.27; >= 2.0.0-rc.0, < 2.13.3; = 2.14.0 |
| CVE-2026-92588 | 4.4 | Sep 16 | n8n before 1.123.76 Improper Authorization via Source Control Push Affected: before 1.123.76; before 2.38.2; before 2.37.7 |
| CVE-2026-86994 | 4.3 | Sep 8 | n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filter Affected: >= 2.38.0, < 2.38.2; >= 2.0.0, < 2.37.7; < 1.123.76 |
| CVE-2026-86995 | 4.3 | Sep 8 | n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read Affected: >= 2.38.0, < 2.38.2; >= 2.0.0, < 2.37.7; < 1.123.76 |
| CVE-2026-85173 | 4.3 | Sep 3 | n8n before 2.36.2 Missing Authorization via Insights API Affected: before 2.36.2; before 2.35.4 |
| CVE-2026-77082 | 4.3 | Aug 20 | n8n before 1.123.69 ReDoS via Filter and Switch Node Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4 |
| CVE-2026-77073 | 4.3 | Aug 20 | n8n before 2.34.1 Cross-Project Credential Access via MCP Affected: 2.34.0 before 2.34.1; 2.0.0 before 2.33.4 |
| CVE-2026-77069 | 4.3 | Aug 20 | n8n before 1.123.69 SSRF Protection Bypass via OAuth2 Affected: before 1.123.69; 2.34.0 before 2.34.1; 2.0.0 before 2.33.4 |
| CVE-2026-33720 | 4.2 | Mar 25 | n8n Has Authorization Bypass in OAuth Callback via N8N_SKIP_AUTH_ON_OAUTH_CALLBACK Affected: < 2.8.0 |
| CVE-2026-103260 | 4.0 | Oct 1 | n8n before 2.39.6 and 2.40.x before 2.40.1 Approval Bypass via Send and Wait Node Affected: before 2.39.6; 2.40.0 before 2.40.1 |